But other attacks have targetted celebrities since then, and now Instagram has added to the list with its admission this week.

“We recently discovered that one or more individuals obtained unlawful access to a number of high-profile Instagram users’ contact information – specifically email address and phone number – by exploiting a bug in an Instagram API,” an Instagram spokesperson told Silicon UK in an emailed statement.

“No account passwords were exposed,” the spokesperson added. “We fixed the bug swiftly and are running a thorough investigation.”

“Our main concern is for the safety and security of our community,” the spokesperson told Silicon UK. “At this point we believe this effort was targeted at high-profile users so, out of an abundance of caution, we are notifying our verified account holders of this issue.”

“As always, we encourage people to be vigilant about the security of their account and exercise caution if they encounter any suspicious activity such as unrecognized incoming calls, texts and emails,” the spokesperson said.

It seems that a bug in the Instagram API made it possible for someone to obtain a set of code, which potentially contained the email addresses and phone numbers for Instagram accounts.

Apparently one individual who found the bug, has used it to access information for some accounts.

Past Scares

Instagram has had a number of security scares in recent years.

In June ESET researchers warned that Russian hackers behind the Turla trojan package had started using Instagram as a means of staying hidden once they have infected a target network.

All those happened despite Instagram already being under pressure to ramp up its security following a number of high-profile incidents in 2015, including one where the account of pop star Taylor Swift was hijacked by Lizard Squad hackers.